Known vulnerabilities in Red Hat Process Automation Manager (formerly JBoss BPM Suite) - page 3

Vendor: Red Hat Inc.
Software: Red Hat Process Automation Manager (formerly JBoss BPM Suite)
Software CPE: cpe:2.3:a:red_hat:jboss_bpm_suite:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 143
Public exploits: 21
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Process Automation Manager (formerly JBoss BPM Suite) Red Hat Process Automation Manager (formerly JBoss BPM Suite) is affected by 143 known vulnerabilities: 2 critical, 38 high, 83 medium, 20 low Critical High Medium Low

Vulnerabilities (143)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76427 - Resource Management Errors
CVE-2023-20883		 CWE-399 Medium
No
No
 7.13.4 23.05.2023 SB2023052310
SB2023052311
SB2023061548
and 42 more
#VU75561 - Improper input validation
CVE-2023-20860		 CWE-20 Medium
No
No
 7.13.4 27.04.2023 SB2023042742
SB2023042746
SB2023050518
and 34 more
#VU72075 - Insecure Temporary File
CVE-2023-0482		 CWE-377 Low
No
No
 7.13.4, 7.13.5 08.02.2023 SB2023020877
SB2023033003
SB2023033004
and 36 more
#VU70530 - Deserialization of Untrusted Data
CVE-2022-45047		 CWE-502 High
Available
No
 7.13.4 28.12.2022 SB2022122828
SB2022122920
SB2023011148
and 49 more
#VU69809 - Out-of-bounds write
CVE-2022-42920		 CWE-787 High
No
No
 7.13.4 01.12.2022 SB2022120151
SB2022120154
SB2022120628
and 56 more
#VU67937 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0722		 CWE-200 Low
No
No
 7.13.1 05.10.2022 SB2022100542
SB2022100554
SB2022103128
#VU66758 - Improper Verification of Cryptographic Signature
CVE-2022-24772		 CWE-347 Medium
No
No
 7.13.1 25.08.2022 SB2022082510
SB2022082512
SB2022100554
and 8 more
#VU66071 - Incorrect Authorization
CVE-2022-1365		 CWE-863 Low
No
No
 7.13.1 03.08.2022 SB2022080322
SB2022080325
SB2022100554
and 3 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 7.13.1 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU65749 - Improper Verification of Cryptographic Signature
CVE-2022-24771		 CWE-347 Medium
No
No
 7.13.1 25.07.2022 SB2022072517
SB2022082512
SB2022100554
and 8 more
#VU63777 - Exposure of sensitive information to an unauthorized actor
CVE-2022-1650		 CWE-200 Medium
No
No
 7.13.1 30.05.2022 SB2022053001
SB2022053002
SB2022061422
and 16 more
#VU62716 - Improper input validation
CVE-2022-26520		 CWE-20 High
No
No
 7.13.1 02.05.2022 SB2022050206
SB2022061311
SB2022062202
and 13 more
#VU62714 - Improper Initialization
CVE-2022-21724		 CWE-665 Medium
No
No
 7.13.1 02.05.2022 SB2022050205
SB2022062202
SB2022062204
and 18 more
#VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24785		 CWE-22 Medium
No
No
 7.13.1 20.04.2022 SB2022042016
SB2022042017
SB2022060317
and 65 more
#VU61471 - Exposure of sensitive information to an unauthorized actor
CVE-2022-0235		 CWE-200 Low
No
No
 7.13.1 20.03.2022 SB2022032001
SB2022032002
SB2022032009
and 35 more
#VU60879 - Improper input validation
CVE-2020-7746		 CWE-20 Medium
No
No
 7.13.1 25.02.2022 SB2020102964
SB2022022516
SB2022100554
and 3 more
#VU60303 - Resource exhaustion
CVE-2022-23913		 CWE-400 Medium
No
No
 7.13.1 04.02.2022 SB2022020405
SB2022060838
SB2022061803
and 3 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 7.13.1 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU59737 - Improper input validation
CVE-2022-21363		 CWE-20 Medium
No
No
 7.13.1 19.01.2022 SB2022011904
SB2022060838
SB2022100554
and 5 more
#VU57215 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-28477		 CWE-94 Medium
No
No
 7.13.1 11.10.2021 SB2021011916
SB2022100554
SB2022103128
and 2 more


Showing elements 41 - 60 out of 143